How to identify and report scams | Robinhood

How to identify and report scams

Before you begin

If you ever suspect that there is unauthorized activity on your account, contact Robinhood Crypto Support immediately.

Impersonation support scams

These scams are incredibly popular and are often found via search engine results or on social media—sometimes as a promotion. You should only contact Robinhood Crypto Support through the app. When you connect to Robinhood Crypto support through chat or email, we’ll NEVER ask you for any account login details or two-factor authentication codes. Don't search for or use Robinhood phone numbers through an internet browser because they potentially are scams.

Phone support scams

Many phone support scams direct you to call a fake Robinhood customer service number. At this time we do not have a direct dial support number that will connect you to a live agent.

Scammers will ask you to:

  • Provide or verify personal information, account login details, or two-factor authentication codes
  • Transfer money or crypto to them
  • Download software designed to give them remote access to your computer or screen viewing capabilities
  • Go to fake Robinhood login pages (hoping you will enter your login information)

How to stay safe

ONLY request account support from Robinhood Crypto through the app.

Robinhood Support will never:

  • Ask you for your Robinhood account password or two-factor authentication (2FA) code
  • Request you to download remote desktop access software or ask you to share your screen
  • Ask you for your account information or credentials for other crypto platforms
  • Ask you to add unfamiliar account information to your account (e.g. an email address you don't own)
  • Send you links within text messages
  • Ask you to create a Robinhood Crypto account
  • Ask you to send money or crypto through Robinhood

Social media support scams

A social media account can impersonate Robinhood Crypto or an executive team member promising a payout, a promotion, or special support if you send them something in return.

How to stay safe

Only engage with our authentic Robinhood social media handles. If someone is reposting a screenshot of what appears to be a Robinhood post, you can always go directly to our authentic handle to confirm whether the original post is legitimate or not. Do not engage with non-Robinhood handles promising you special help with your account.

Phishing

Phishing is a common way scammers try to trick you into giving them personal information such as an account email address and password, verification codes, or other personal information. Phishing attempts come via email, where scammers use different social engineering tactics to impersonate reputable senders like the government, your bank, or a firm.

Other social engineering attempts leverage fake websites, text messages, social media messages and profiles, phone calls, or postal letters pretending to be from Robinhood. When successful, these scammers can gain access to important accounts, such as your email or bank accounts that can result in identity theft, financial loss, or both.

How to spot phishing scams

  1. The sender’s email domain (the web address that comes after the @ symbol): While the sender name might include “Robinhood,” the email domain must be an authentic Robinhood domain.
  • Authentic domain examples: @robinhood.com
  • Fraudulent domain examples: @robinh00d.com, @gmail.com, and @yahoo.com
  1. Language and content: Look out for typos, grammatical mistakes, awkward language, or missing words or spaces. Also, be cautious of situations that introduce urgency and fear by using emotionally intense language paired with time-sensitive consequences. For example, “respond immediately or your account will be suspended.”
  2. Links, buttons, or phone numbers: Instead of selecting links or buttons or calling phone numbers within emails, log in to the Robinhood app directly. Links in phishing emails could direct you to a fake website asking for sensitive information such as your email address and password, or account information.
  3. Downloads or attachments: Phishing emails may include attachments claiming to be an important file. These frequently contain malware that can infect your device. Be especially wary of .zip, .exe, or .doc files.
  4. Fake prizes or gifts: Scammers may also contact you with attractive offers for free stock or other enticing deals to lure you in. Always be careful when clicking on links in social media messages, text messages, and emails that you do not expect or recognize—especially if they sound too good to be true. On social media, Robinhood will only share updates and general information using our verified Robinhood social media handles.
  5. Only request chat support from Robinhood through the app. At this time, we do not have a direct dial support phone number that will connect you to a live agent.
  6. Only download and use the authentic Robinhood Crypto app available in the Google Play store and Apple App Store.

Your personal email and phone provider security matter.

When you request a password reset link for a site, where does that link typically go? Your personal email. Use a strong, unique password (10+ characters) and 2FA on your personal email associated with your Robinhood Crypto account to stay safe.

We recommend doing the same with your online account for your phone provider (Vodafone, O2, Three, EE, and so on). This helps protect against SIM swapping, when a scammer bribes or convinces the phone carrier to switch the phone number associated with your device to theirs.

Crypto scams

Crypto scams are becoming increasingly common. Crypto transfers cannot be reversed or undone, and Robinhood Crypto cannot reimburse you for crypto transfers that you authorize. You must keep your password secure and only send crypto to trusted crypto wallets.

Common scams

Crypto scams present in various forms, however these are some of the most common:

  • Transfer scams: Transferring your funds or tokens to a scammer, either with the expectation of receiving something in return, or under the guise of false trust. This includes romance scams where scammers attempt to gain your trust after meeting you on a dating site or social media, only to persuade you to give up your crypto. Employment scams are also on the rise, where scammers direct you to Robinhood to facilitate business transactions. Scammers posing as recruiters will direct individuals to establish accounts at Robinhood and receive funds from typically stolen bank accounts or other illicit activity. The individuals are then instructed to withdraw portions of the money to various sources while keeping some for commission or compensation.
  • Phishing scams: Interacting with fake marketplaces, social media accounts, giveaway offers, and unsolicited airdropped phishing links designed to gather your personal information or sensitive wallet information (e.g. secret recovery phrase), or that are embedded with malicious smart contracts designed to give the scammer access to your tokens.
  • Pump and dump scams: Where scammers rapidly and artificially inflate the price of a token and then sell it to you when the value is high, leaving you stuck with a token that has little-to-no real value.
  • Rug pull scams: Where scammers attract investors, but then abandon the project and disappear with project funds.

How to stay safe

  • Be wary of suspicious phishing, social engineering, and scam attempts: This includes airdrops, emails, text messages, social media messages, and fraudulent websites that ask for your personal information, offer financial advice, etc. When in doubt, verify the authenticity of any request before taking action.
  • Before signing a transaction with your wallet, make sure to check the transaction details: It’s possible for scammers to access your funds if you sign a transaction, so only approve transactions if you trust the sender and confirm the transaction is the one you intend to make.
  • Only transact with entities and individuals that you know and trust: Exercise caution while forming online relationships. Beware of promises of “low investments and huge returns.” If it’s too good to be true, it probably is. Also, if someone you have recently met offers you financial advice, get a second opinion from someone you know and trust. Especially before you send money or crypto an unknown account or person.
  • Do your research: This means investing your digital assets in well-known and credit-worthy platforms. If it is a familiar crypto company they are referencing, type the URL yourself and do your own research instead of trusting their link.

Payment scams

Payment scams are all too common, and a scammer’s tactics to steal your money and assets are always changing. Robinhood Crypto is not liable for any payments made in connection with a third party scam or if you make a mistake in providing payment information to third parties. To avoid scams, make sure that you only interact with people you know and trust and carefully review all information before sending a payment.

Common scams

Here are some of the most common payment scams:

  • Impersonation scams: Impersonation scams are when a scammer pretends to be someone you trust to convince you to send them money. They can begin with a phone call, text message, or email from a trusted business, a well known celebrity/political figure, or someone you know, such as a friend or family member. The most common types of impersonation scams include: tech support scams, celebrity impersonation, and family emergency scams.
  • Charity scams: Charity fraud schemes usually seek donations for organizations that don’t exist or that don’t support the causes mentioned, or involve fraudulently claiming affiliation with a legitimate charity. These scams typically increase around the holiday season or when natural disasters occur. Tragedies are often used to exploit people who want to help and donate to charitable causes.
  • Debt collection or relief scams: Scammers will often pose as debt collectors on a debt that’s already been paid or a debt someone doesn’t actually owe. Some scams may target families or survivors of deceased relatives posing as debt collectors.
  • Romance scams: These typically involve a scammer who pretends to have a romantic interest in a target, establishes a relationship, and then attempts to get money or sensitive information from the target under false pretenses.
  • Employment scams: Scammers posing as recruiters will direct individuals to establish accounts at Robinhood Crypto and receive funds from typically stolen bank accounts or other illicit activity. The individuals are then instructed to withdraw portions of the money to various sources while keeping some for commission or compensation.
  • Investment scams: These are those “low investments and huge returns” scenarios, where people are tricked into investing money with promises of high returns, without financial risk.
  • Lottery and sweepstakes scams: Scammers will often inform you that you’ve won a prize through a lottery or sweepstakes, and require you to pay an upfront fee to recover the prize.

Take action and report

If you encounter any suspected phishing scams in email, text messages, phone calls, websites, or social media, report them to reportphishing@robinhood.com. Only use this email address to report suspected phishing scams. You won't receive a response from our team.

Help us investigate with the right information:

  • Email: Include full email headers
  • Text message: Screenshot the message and include the number that contacted you
  • Phone call: Include the phone number from the call and share as much detail as possible
  • Website or social media account: Send the full URL or handle and how you found it (such as through a search or a direct message)

Remember, Robinhood Crypto will never ask you for your login info or 2FA code.

Reporting suspected scams helps Robinhood identify and take down these sites and thwart attacks—your report can help protect your account and others too.

If you shared your credentials with anyone else, used the same password for a different account, or are concerned about your account’s security, do the following as soon as possible:

  • Change your password immediately: A strong password contains at least 10 characters, includes uppercase and lowercase letters, numbers, and symbols—and is one you don’t use for any other app or service or share with anyone.
  • Enable 2FA: 2FA helps protect your account by requiring two sources of verification to sign into your account: something you know (your password) and something you have (a one-time code). Every time you log in or make changes to your account, you’ll be prompted for a verification code. This step helps protect your account, even if someone knows or guesses your password.

Contact Robinhood Crypto Support immediately through the app if you notice any unusual logins or activity you don’t recognize.

Disclosures

Crypto markets are highly volatile, and trading or holding crypto can lead to loss of your assets. Crypto is not legal tender, and is not backed by any government or covered by any government compensation scheme.

Crypto services are offered to eligible customers through an account with Robinhood Europe, UAB (company number 306377915), with its registered address at Mėsinių 5, LT-01133 Vilnius, Lithuania (“RHEC”). RHEC is registered according to the regulatory requirements of the Republic of Lithuania as a virtual currency exchange and virtual currency depository wallet operator. RHEC is supervised by the Lithuanian Financial Crime Investigation Service under the Ministry of the Interior of the Republic of Lithuania. RHEC is registered under No. RDWW-1076 in the register of virtual currency activities, kept by the Director of the Tax Administration Chamber in Katowice, in accordance with the Anti-Money Laundering and Counter-Terrorist Financing Act applicable in Poland. RHEC is also registered according to the regulatory requirements of the Republic of Italy in the special section of the register of bureaux de change (virtual currency and digital wallet services providers) kept by the Organismo Agenti e Mediatori (OAM) under No. PSV153. RHEC is subject to requirements and obligations applicable in the Republic of Italy in accordance with the Legislative Decree No. 231/2007 as to the prevention of the use of the financial system for the purpose of money laundering and terrorist financing and, to this end, is supervised by the Finance Intelligence Unit (Unità di Informazione Finanziaria – UIF) of the Bank of Italy.

Was this article helpful?
Reference No. 3770004
Still have questions? Contact Robinhood Support
Follow us on
PARTICIPATION IS POWER™

Crypto markets are highly volatile, and trading or holding crypto can lead to loss of your assets. Crypto is not legal tender, and is not backed by any government or covered by any government compensation scheme.

Cryptocurrency services are offered for eligible EU customers through an account with Robinhood Europe, UAB (company number 306377915), with its registered address at Mėsinių 5, LT-01133 Vilnius, Lithuania (“RHEC”). RHEC is registered according to the regulatory requirements of the Republic of Lithuania as a virtual currency exchange and virtual currency depository wallet operator. RHEC is supervised by the Lithuanian Financial Crime Investigation Service under the Ministry of the Interior of the Republic of Lithuania. RHEC is registered under the applicable Polish law as a virtual assets service provider (VASP) in the Register of Virtual Currency Activities maintained by the Director of the Tax Administration Chamber.

Robinhood, 85 Willow Road, Menlo Park, CA 94025.© 2024 Robinhood. All rights reserved.
Follow us on

Crypto markets are highly volatile, and trading or holding crypto can lead to loss of your assets. Crypto is not legal tender, and is not backed by any government or covered by any government compensation scheme.

Cryptocurrency services are offered for eligible EU customers through an account with Robinhood Europe, UAB (company number 306377915), with its registered address at Mėsinių 5, LT-01133 Vilnius, Lithuania (“RHEC”). RHEC is registered according to the regulatory requirements of the Republic of Lithuania as a virtual currency exchange and virtual currency depository wallet operator. RHEC is supervised by the Lithuanian Financial Crime Investigation Service under the Ministry of the Interior of the Republic of Lithuania. RHEC is registered under the applicable Polish law as a virtual assets service provider (VASP) in the Register of Virtual Currency Activities maintained by the Director of the Tax Administration Chamber.

Robinhood, 85 Willow Road, Menlo Park, CA 94025.© 2024 Robinhood. All rights reserved.